I finally figured out how to get the pictures to display correctly in kronos HR under Terminal Server. Apparently the picture is downloaded as a temp file into the C:\WINDOWS\Downloaded Program Files folder. This is a rather random place for it but that’s a different story. So to bypass this I used SetACL.exe to give the TSE_Users change permission to the downloaded program files folder.

The bad part of this is that it opens an avenue for spyware, but surfing outside of the local network is pretty much locked down inside of TS.